Vulnerability · Published Jul 18, 2025 · Assigned by Joomla
CVE-2025-49484Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.1 for Joomla
High 8.7
In plain English
A high-severity SQL injection in JS Jobs component for Joomla from joomsky.com. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 4.9% (higher than 92% of all known vulnerabilities).
Severity (CVSS 4.0)8.7High
Exploit odds (30 days)4.9%top 7.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid' parameter in the employee application feature.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| joomsky.com | JS Jobs component for Joomla | 1.0.0-1.4.1 |
Weakness: CWE-89 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://joomsky.com/js-jobs-joomla/ product
- https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-49484 third-party-advisory
- https://www.exploit-db.com/exploits/52373 exploit